Privacy Policy

This Privacy Policy describes how polaribridge (polaribridge SIA) collects, uses, and protects your personal information. We are committed to safeguarding your privacy and handling your data with the utmost care and transparency. This policy explains what information we gather, how we use it, your rights, and how you can contact us with questions.

Who We Are

We operate a birthday balloon and decoration bundle delivery service based in Riga, Latvia. We provide helium balloon arches, party decoration packages, and related services to customers. As the data controller, we are responsible for managing your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect information in several ways to provide our services effectively:

• Contact Information: When you reach out through our website, email, or phone, we collect your name, email address, phone number, and any message content you provide.
• Order Information: When you place an order, we collect delivery address, payment details, event date, and decoration preferences.
• Technical Data: We automatically collect information about your device, browser type, IP address, and pages you visit on our website.
• Cookie Data: We use cookies to enhance your browsing experience and understand how you use our services.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you provide information through forms or opt-in to communications, we rely on your explicit consent.
• Contract Performance: We process data necessary to fulfill your order and provide our delivery services.
• Legitimate Interest: We use data to improve our services, prevent fraud, and maintain website security.
• Legal Obligation: We may process data to comply with tax laws, accounting requirements, and other legal obligations in Latvia.

How We Use Your Information

We use your personal data for the following purposes:

• Processing and delivering your balloon and decoration orders
• Communicating with you about your orders, delivery dates, and service updates
• Responding to inquiries and providing customer support
• Sending promotional materials and newsletters (with your consent)
• Analyzing website usage to improve our services and user experience
• Preventing fraud and maintaining the security of our website and systems
• Complying with legal and regulatory requirements

Data Retention

We retain your personal information for specific periods based on the purpose of processing:

• Order Data: We retain order information, including contact details and delivery records, for 24 months after order completion for accounting and customer service purposes.
• Contact Form Messages: Inquiries received through our contact form are retained for up to 12 months after the final interaction, or longer if required for dispute resolution.
• Website Analytics and Cookies: Technical and analytics data is retained for up to 14 months to analyze trends and improve our website performance.
• Server Logs: Automated server logs containing IP addresses and access times are retained for up to 12 months for security and troubleshooting purposes.
• Marketing Communications: If you subscribe to our newsletter, we retain your email address until you unsubscribe or request deletion.

After these periods expire, we delete or anonymize your data, except where longer retention is required by law.

Your Rights

Under data protection law, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: You can ask us to limit how we use your information in certain circumstances.
• Right to Data Portability: You can request your data in a structured, portable format.
• Right to Object: You can object to certain types of processing, including marketing communications.
• Right to Lodge a Complaint: You have the right to submit a complaint to the Data State Inspectorate of Latvia (DVIS) if you believe your rights have been violated.

To exercise any of these rights, please contact us using the information provided below.

Cookies and Tracking

We use cookies to enhance your experience on our website. Cookies are small files stored on your device that help us remember your preferences and understand how you use our site. Essential cookies are necessary for basic website functionality. Analytics cookies help us improve our services by tracking user behavior. Marketing cookies may be used to show you relevant advertisements.

You can control cookie settings through your browser preferences. Please note that disabling essential cookies may affect website functionality. For detailed information about our cookie practices, please see our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption, secure payment processing, and restricted access to personal data. However, no method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Third-Party Sharing

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist us in delivering services, such as delivery partners and payment processors. These partners are bound by confidentiality agreements and are only permitted to use your data as necessary to provide services on our behalf. We may also disclose information when required by law or to protect our rights and safety.

International Transfers

Your personal information is primarily processed and stored in Latvia within the European Union. If we transfer data outside the EU, we implement appropriate safeguards in accordance with GDPR requirements to ensure your data receives adequate protection.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will promptly delete such information.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. Your continued use of our website following any changes constitutes your acceptance of the updated policy.